garak Description
Garak evaluates the potential failures of an LLM in undesirable ways, examining aspects such as hallucination, data leakage, prompt injection, misinformation, toxicity, jailbreaks, and various other vulnerabilities. This free tool is designed with an eagerness for development, continually seeking to enhance its functionalities for better application support. Operating as a command-line utility, Garak is compatible with both Linux and OSX systems; you can easily download it from PyPI and get started right away. The pip version of Garak receives regular updates, ensuring it remains current, while its specific dependencies recommend setting it up within its own Conda environment. To initiate a scan, Garak requires the model to be analyzed and, by default, will conduct all available probes on that model utilizing the suggested vulnerability detectors for each. During the scanning process, users will see a progress bar for every loaded probe, and upon completion, Garak will provide a detailed evaluation of each probe's findings across all detectors. This makes Garak not only a powerful tool for assessment but also a vital resource for researchers and developers aiming to enhance the safety and reliability of LLMs.
garak Alternatives
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Astra Pentest
Astra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting.
The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA.
Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.
Learn more
SplxAI
SplxAI presents an automated platform tailored for conversational AI solutions. At the heart of their offerings is Probe, which actively detects and addresses vulnerabilities within AI systems by replicating targeted attack scenarios specific to various domains. Among its notable features, Probe provides comprehensive risk assessments, compliance and framework evaluations, domain-oriented penetration testing, ongoing automated testing, and support for over 20 languages, showcasing its multi-lingual capabilities. This platform is designed to integrate smoothly into development processes, ensuring that AI applications maintain a high level of security throughout their entire lifecycle. SplxAI aims to protect and fortify generative AI-driven conversational applications by delivering sophisticated security and penetration testing services, allowing organizations to harness the full potential of AI without sacrificing safety. By using Probe, developers can effectively evaluate and fine-tune their applications' boundaries to achieve the best security measures and enhance user experiences without imposing unnecessary limitations. Ultimately, this approach encourages a balance between robust security and innovative functionality in AI technology.
Learn more
Vega
Vega is a powerful tool designed to assist in identifying and validating various security vulnerabilities, including SQL Injection, cross-site scripting, and the accidental exposure of sensitive data. This application, developed in Java, features a graphical user interface and is compatible with Linux, OS X, and Windows platforms. With Vega, you can detect a range of vulnerabilities like reflected and stored cross-site scripting, blind SQL injection, remote file inclusion, and shell injection, among others. Additionally, it assesses TLS/SSL security configurations and suggests enhancements for your TLS servers' security. The tool boasts an automated scanner for efficient testing and an intercepting proxy for in-depth analysis. Vega’s scanning capabilities are adept at uncovering SQL injection vulnerabilities and more. It also incorporates a website crawler to enhance its automated scanning process, and it has the ability to log into websites automatically when provided with user credentials. Overall, Vega is an invaluable resource for enhancing your web application's security posture.
Learn more
Pricing
Pricing Starts At:
Free
Free Version:
Yes
Integrations
Company Details
Company:
garak
Website:
github.com/leondz/garak/
Media
Recommended Products
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms
Mac
Linux
Types of Training
Training Docs
Customer Support
Online Support
garak Features and Options
garak Lists
garak User Reviews
Write a Review- Previous
- Next
